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ABSTRACT OF THE DISCLOSURE 


METHOD AND APPARATUS FOR TYPE INDEPENDENT PERMISSION 

BASED ACCESS CONTROL 

5 

A method and apparatus for type independent 
permission based access control are provided. The method 
and apparatus utilize object inheritance to provide a 
mechanism by which a large group of permissions may be 
10 assigned to a codesource without having to explicitly 
assign each individual permission to the codesource. A 
1=^ base permission, or superclass permission^r is defined 

JS along with inherited, or subclass, permissions that fall 

13 below the base permission in a hierarchy of permissions, 

FU 

'2 15 Having defined the permissions in such a hierarchy, a 

14 developer may assign a base permission to an installed 
class and thereby assign all of the inherited permissions 
of the base permission to the installed class. In this 
way, security providers need not know all the permission 

20 types defined in an application. In addition, security 
providers can seamlessly integrate with many applications 
without changing their access control and policy store 
semantics. Moreover, application providers' security 
enforcement is no dependent on the security provider 
25 defined permissions. The method and apparatus do not 

require any changes to the Java security manager and do 
not require changes to application code.. 


